Acas best practice knowledge

ACAS EXAM BEST PRACTICE KNOWLEDGE (BPG) (ACTUAL
2025/2026) EXAM 1, 2, 3, 4, 5 & 6 QUESTIONSAND100%
VERIFIEDANSWERS




c - --answers----
H H



_________ are administrative level usernames and passwo
H H H H H H



rds (or SSH key pairs) used in authenticated scans?
H H H H H H H H




Select the best answer to complete the statement.
H H H H H H H




a. Audit files H




b. Scan policies H




c. Credentials
d. Asset lists H




c - --answers----
H H



Networks using Dynamic Host Configuration Protocol (DHCP)
H H H H H H



require that this active scan setting be enabled to properly trac
H H H H H H H H H H H



k hosts.
H




Select the best answer for the statement.
H H H H H H




a. Rollover Option H




b. Enable Safe Checks H H




c. Track hosts which have been issued new IP addresses
H H H H H H H H

,d. Remove vulnerabilities from scanned hosts that have been i
H H H H H H H H



nactive for (X days) H H H




a - --answers----
H H



How many import repositories can you select for a single s
H H H H H H H H H H



can?
Select the best answer to the question.
H H H H H H




a. Only one H




b. A maximum of three
H H H




c. You can select all your available repositories
H H H H H H




d. As many as you like, if none of them are agent repositories
H H H H H H H H H H H




a c - --answers----
H H H



Per the ACAS Best Practices Policy Deviations spreadsheet, wh
H H H H H H H H



ich Port Scan Range value tells the scanner to scan all ports?
H H H H H H H H H H H




Select the best answers to the question.
H H H H H H




a. 1-65535
b. Default
c. All
d. Common


a. Directs the scanner to target a specific range of ports.
H H H H H H H H H




b. Ensures that potential harmful plugins are not exercised by t
H H H H H H H H H



he Scanner.
H

,c. Limits the maximum number of plugins a Nessus scanner
H H H H H H H H H



will send to a single host at one time.
H H H H H H H H




d. Limits the maximum number of targets that a single Nessus s
H H H H H H H H H H



canner will scan at the same time. H H H H H H




- --answers----
H



Drag the matching description to the Scan Policy option from th
H H H H H H H H H H



e list below.
H H




Sort elements H




a. Port Scan Range H H




b. Enable Safe Checks H H




c. Max Simultaneous Checks Per Host
H H H H




d. Max Simultaneous Checks Per Scan
H H H H




c - --answers----
H H



You need to make a change to a setting in the BPG Vulnerabili
H H H H H H H H H H H H



ty Scan Policy Template, such as the anti-
H H H H H H H



Hvirus definition period setting.
H H H




Which of the following is a true statement?
H H H H H H H




a. Submit a copy of the modified template to JFHQ-
H H H H H H H H



DODIN for approval H H




b. Make the changes as needed, there are no other r
H H H H H H H H H



equirements.
c. Ensure the change is documented and approved by you AO, I
H H H H H H H H H H



SSM, or local authority. H H H

, d. Don't make any changes, changing the BPG-
H H H H H H



provided scan is not allowed per CCRI audit guidelines.
H H H H H H H H




a - --answers----
H H



To get the most accurate results on the security posture of a s
H H H H H H H H H H H H



ystem, which of the following actions should be done prior to sca
H H H H H H H H H H H



nning?


a. Update the plugins H H




b. Patch the scanner H H




c. Reboot the target host H H H




d. Log all users out of the system.
H H H H H H




True - --answers----
H H



According to the ACAS Best Practices Guide/ACAS TASKORD,
H H H H H H H H



both Discovery and Vulnerability Scans are to be credentialed.
H H H H H H H H




True H




False


d - --answers----
H H



Per the TASKORD the organization will conduct discovery sca
H H H H H H H H



ns of the site's assigned IP space (active and inactive IP address
H H H H H H H H H H H



es and ranges) at least once every how many days?
H H H H H H H H H




Select the best answer (per the Best Practices Guide).
H H H H H H H H




a. 7